|
|
 |
|
|
In the switch core technology to achieve storage security - Storage Security, Storage, Exchange sec by big tree
|
|
|
In the switch core technology to achieve storage security - Storage Security, Storage, Exchange sec by BIG TREE
|
|
| Article Posted: 11/11/2010 |
| Article Views: 23 |
| Articles Written: 1033 - MORE ARTICLES FROM THIS AUTHOR |
| Word Count: 635 |
| Article Votes: 0 |
|
In the switch core technology to achieve storage security - Storage Security, Storage, Exchange sec |
|
|
|
|
|
Business,Business News,Business Opportunities
|
|
General corporate networks have certain strategies and equipment safety precautions, such as Firewall , Intrusion Detection Systems (IDSs), Proxy Servers, etc., although they can also play a certain extent, the security establishment for the storage layer of "protection line" role, but the core technology for storage security, should the security of storage networks, switches, fiber, equipment, arrays, hosts bus adapter (HBA) and so on to achieve.
FC, IP network security
Either Fibre Channel or IP networks, the main potential threats from unauthorized access, in particular management interface. For example, once the acquisition and storage area network (SAN) connected to the server administrator privileges, fraudulent access can succeed. This intruder can access any and SAN-connected systems. Therefore, regardless of what kind of storage network, it should be recognized that application of adequate access control, authorized access, signature verification of the strategy to prevent security vulnerabilities is essential.
Measurement error in the IP network attacks than in the Fibre Channel SAN, easy to implement. Against such attacks, are generally more complex encryption algorithm used. Although it seems rare DoS
, but this does not mean impossible. However, if you want to achieve in the Fibre Channel SAN DoS attacks, hackers are not ordinary software can achieve, because it often requires more specialized security knowledge.
SAN data security methods to achieve SAN
ensure data security are the two basic security mechanism is a regional system of zoning and logical unit value (LogicalUnitNumber) mask.
Zoning is a regional approach. Through this method, certain storage resources only by authorized users who are visible and departments. A partition can be multiple servers, storage devices, subsystems, switches, HBA and other computer component. Only members in the same partition can communicate with each other.
Zoning is often achieved at the exchange level. According to implementations, can be divided into two modes, one for the hard partition, a soft partition. Hard partition is the partition according to the exchange of port development strategy. All attempts to unauthorized communications port are prohibited. As hard partition is achieved in the system circuit and the implementation of the routing table in the system, therefore, than the soft partition, with better security.
In the Fibre Channel network, the soft partition is based on the mechanism of wide-area name (WWN) of the. WWN is assigned to the network Fiber Optic Equipment A unique identifier. As the soft partition is to ensure the software in different partitions will not be the same WWNs, therefore, than the hard partition software partition technology is more flexible, especially in the frequent changes in network configuration application could be well manageability.
Some switches with port binding feature, which can limit Network equipment Can only be exchanged through predefined ports to communicate. Using this technology, which enables storage pool access restrictions to protect the SAN from unauthorized user access.
Another widely used technology is LUN masking. A LUN is the target device (such as tape and disk arrays) within the SCSI logical unit identifier. In Fibre Channel, LUN WWN-based system implementation.
LUN LUN masking technology is assigned to the host server, the server can only see their assigned LUN. If there are many servers trying to access a particular device, then the network administrator can set a specific LUN or a LUN group can visit, so other servers can refuse access to protect data security. Not only in the host, but also in HBA, storage controllers, disk arrays, switches can be realized in various forms of LUN shield. I am an expert from China Manufacturers, usually analyzes all kind of industries situation, such as camouflage bedding twin , queen metal frame.
Related Articles -
camouflage bedding twin, queen metal frame,
|
Rate This Article  |
|
|
|
|
|
Do you Agree or Disagree? Have a Comment? POST IT!
| Reader Opinions |
|
|
|
|
|
|
|
|
|
| Author Login |
|
|
 |
Advertiser Login
ADVERTISE HERE NOW!
Limited Time $60 Offer!
90 Days-1.5 Million Views
|
|
PAUL PHILIPS
For more articles, blog messages & videos and a free e-book download go to www.NewParadigm.ws your p...more
|
|
|
|
|
TIM FAY
After 60-plus years of living, I am just trying to pass down some of the information that I have lea...more
|
|
|
|
|
LAURA JEEVES
At LeadGenerators, we specialise in content-led Online Marketing Strategies for our clients in the t...more
|
|
|
|
|
ADRIAN JOELE
I have been involved in nutrition and weight management for over 12 years and I like to share my kn...more
|
|
|
|
|
GENE MYERS
Author of four books and two screenplays; frequent magazine contributor. I have four other books "in...more
|
|
|
|
|
DONNIE LEWIS
I'm an avid consumer of a smoothie a day living, herbs, vitamins and daily dose of exercise. I'm 60...more
|
|
|
|
|
ALEX BELSEY
I am the editor of QUAY Magazine, a B2B publication based in the South West of the UK. I am also the...more
|
|
|
|
|
SUSAN FRIESEN
Located in the lower mainland of B.C., Susan Friesen is a visionary brand strategist, entrepreneur, ...more
|
|
|
|
|
STEPHEN BYE
Steve Bye is currently a fiction writer, who published his first novel, ‘Looking Forward Through the...more
|
|
|
|
